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AMENDMENTS TO THE CLAIMS: 

Please add newly written claims 16-29 as follows. 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

1 . (previously presented) A method of modifying the content of the non-volatile memory 
of a contactless microcircuit card, wherein the card is temporarily coupled to a terminal while a 
transaction is being executed, in particular a remote ticketing transaction, the transaction 
including the terminal applying to the card a plurality of modification commands, each command 
comprising at least one operation of recording in the card memory a respective data item 
designated by the command, the various data items recorded in this way being mutually 
interdependent, said method comprising the card executing the steps of: 

a) on receiving corresponding respective commands from the terminal, modifying the 
contents of the card memory by provisionally recording in the card memory each of said 
interdependent items of information without losing prior values corresponding to said items; and 

b) finalizing the modifications to the card memory by one of confirming all of the 
modifications and by discarding all of the modifications, wherein for subsequent operations, the 
commands executed in step a) will either all have been taken into account, or else all of them 
will be without effect. 

2. (previously presented) The method of claim 1, wherein: 

in step b), a flag confirming proper execution is recorded in the memory of the card; and 
when the card subsequently receives a command requiring at least one of the data items 
written in step a) or the value corresponding thereto to be read and/or modified, the card begins 
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by examining the state of the flag, and if it has not been recorded, the card ignores or cancels the 
provisional recordings previously made in step a) and executes the command on the basis of said 
prior values corresponding to the data items. 

3. (previously presented) The method of claim 2, wherein, when the card examines the 
state of the flag, and if the flag has been recorded, the card executes operations for copying the 
provisional writes made in step a). 

4. (previously presented) The method of claim 1, in which the card is suitable for 
operating in two modes, namely: 

an in-session mode in which recordings are made by executing steps a) and b); and 
an out-of session mode in which the making of recordings is not confirmed to all of steps 
a) and b). 

5. (previously presented) The method of claim 1, comprising an authentication function 
combined with the function of finalizing step b), forcing step b) to be discarded in the event of 
authentication failing. 

6. (previously presented) The method of claim 5, in which said authentication is 
performed by the card which authenticates the terminal and/or the data interchanged between the 
terminal and the card, the card checking a cryptographic certificate produced by the terminal and 
transmitted to the card, and confirming the modifications in step b) only if the certificate is 
recognized as being correct. 
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7. (previously presented) The method of claim 4, wherein when the card receives from 
the terminal commands for modifying the content of the memory and including verification of a 
cryptographic certificate, said verification is performed if the command is received out-of- 
session, and it is not performed if the command is received in-session, wherein said 
authentication is performed by the card which authenticates the terminal and/or the data 
interchanged between the terminal and the card, the card checking a cryptographic certificate 
produced by the terminal and transmitted to the card, and confirming the modifications in step b) 
only if the certificate is recognized as being correct. 

8. (previously presented) The method of claim 5, in which said authentication is 
performed by the terminal which authenticates the card and/or the data interchanged between the 
terminal and the card, the card producing and transmitting a cryptographic certificate in 
conditional manner to the terminal, if and only if the modifications have been confirmed in 

step b). 

9. (previously presented) The method of claim 4, wherein said authentication is 
performed by the terminal which authenticates the card and/or the data interchanged between the 
terminal and the card, the card producing and transmitting a cryptographic certificate in 
conditional manner to the terminal, if and only if the modifications have been confirmed in step 
b), wherein when the card receives from the terminal commands for modifying the contents of 
the memory and including the production of a cryptographic certificate, said production is 
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performed if the command is received out-of-session, and is not performed if the command is 
received in-session. 

10. (previously presented) The method of claim 1, in which, when the card receives from 
the terminal in step b) commands for modifying the contents of the memory and including the 
production of a plurality of cryptographic certificates, these certificates are stored in step b), and 
then transmitted together to the terminal if, and only if the modifications have been confirmed in 
step b). 

11. (previously presented) The method of claim 4 taken in combination, in which at least 
some of the commands that may be executed in step b) include an optional inhibit attribute, and 
in which, if the card executes such a command in-session in a step b), the modifications 
performed by said command take effect independently of the result of step b). 

12. (previously presented) The method of claim 1 , in which provision is further made, 
after step b) and in the event of modifications being confirmed, for the following sequence of 
steps to be performed: 

d) the terminal executes an action following confirmation by the card; and 

e) in the event of said action being properly performed by the terminal, ratification 
information is recorded in the card suitable for subsequent accessing by reading. 
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13. (original) The method of claim 12, in which the recording command of step e) is an 
implicit command, any command received by the card after step b) being interpreted as an order 
for recording ratification information in the card. 

14. (previously presented) The method of claim 1, wherein after said modifying step (a) 
and prior to said finalizing step (b), any interruption in operation of the card results in the 
cancellation of the modifications in the modifying step (a) and return of the values of the 
interdependent items of information of the card memory to their prior values. 

15. (previously presented) The method of claim 14, wherein the cancellation step occurs 
when the card is next coupled to a terminal. 

16. (new) A method of modifying the content of the non-volatile memory of a 
microcircuit card, in particular a contactless card, in which method the card is temporarily 
coupled to a terminal while a transaction is being executed, in particular a remote ticketing 
transaction, said transaction including the terminal applying to the card a plurality of 
modification commands, each of said modification command comprising at least one operation 
of recording in the card memory a particular data item, determined among a plurality of data 
items contained in the card as a function of an index or of an identifier conveyed to the card by 
each of said commands, the various data items recorded in this way being mutually 
interdependent, the method comprising the card executing the following steps: 

a) on receiving corresponding respective commands from the terminal, provisionally 
recording in the card memory each of said interdependent items of information; then 
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b) finalizing such modifications such that for subsequent operations the commands 
executed in step a) will: 

i) either all have been taken into account, 

ii) or else all of them will be without effect, 
in which method: 

said commands are commands for modification of the contents of the card memory, 
in step a), the writing in the card memory of new values of said data items modifies the 

contents of the memory without losing prior values of said items, and 

in step b), the modifications are finalized in such a way that, if all the commands are 

performed in step a) are without effect, then the data contained in the non-volatile memory will 

remain in the state they were before step b) being performed. 

17. (new) The method of claim 16, in which: 

in the event of confirmation in step b), a flag confirming proper execution is recorded in 
the memory of the card; and 

when the card subsequently receives a command requiring at least one of the data items 
written in step a) or the value corresponding thereto to be read and/or modified, the card begins 
by examining the state of the flag, and if it has not been recorded, the card ignores or cancels the 
provisional recordings previously made in step a) and executes the command on the basis of said 
prior values corresponding to the data items. 
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18. (new) The method of claim 17, in which, when the card examines the state of the flag, 
and if the flag has been recorded, the card executes operations for copying the provisional writes 
made in step a). 

19. (new) The method of claim 16, in which the card is suitable for operating in two 
modes, namely: 

an in-session mode in which recordings are made by executing steps a) and b); and 
an out-of-session mode in which the making of recordings is not confirmed to all of steps 
a) and b). 

20. (new) The method of claim 16, comprising an authentication function combined with 
the function of finalizing step b), forcing step b) to be discarded in the event of authentication 
failing. 

21 . (new) The method of claim 20, in which said authentication is performed by the card 
which authenticates the terminal and/or the data interchanged between the terminal and the card, 
the card checking a cryptographic certificate produced by the terminal and transmitted to the 
card, and confirming the modifications in step b) only if the certificate is recognized as being 
correct. 

22. (new) The method of claim 19, in which, when the card receives from the terminal 
commands for modifying the content of the memory and including verification of a 
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cryptographic certificate, said verification is performed if the command is received out-of- 
session, and it is not performed if the command is received in-session. 

23. (new) The method of claim 20, in which said authentication is performed by the 
terminal which authenticates the card and/or the data interchanged between the terminal and the 
card, the card producing and transmitting a cryptographic certificate in conditional manner to the 
terminal, if and only if the modifications have been confirmed in step b). 

24. (new) The method of claim 19, in which, when the card receives from the terminal 
commands for modifying the contents of the memory and including the production of a 
cryptographic certificate, said production is performed if the command is received out-of- 
session, and is not performed if the command is received in-session. 

25. (new) The method of claim 19, in which, when the card receives from the terminal in 
step b) commands for modifying the contents of the memory and including the production of a 
plurality of cryptographic certificates, these certificates are stored in step b), and then transmitted 
together to the terminal if, and only if the modifications have been confirmed in step b). 

26. (new) The method of claim 19, in which at least some of the commands includes an 
inhibit attribute, and in which, if the card executes such a command, the modifications performed 
by said command take effect independently of the result of step b). 
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27. (new) The method of claim 19, in which provision is further made, after step b) and in 
the event of modifications being confirmed, for the following sequence of steps to be performed: 

d) the terminal executes an action following confirmation by the card; and 

e) in the event of said action being properly performed by the terminal, ratification 
information is recorded in the card suitable for subsequent accessing by reading. 

28. (new) The method of claim 27, in which the recording command of step e) is an 
implicit command, any command received by the card after step b) being interpreted as an order 
for recording ratification information in the card. 

29. (new) The method of claim 19, in which after performing at least one of said 
modifications in step a) which is not followed by a finalization by a step b) occurring thereafter, 
in case of later re-initialization of the card provision is made of a preliminary step infirming all 
modifications thus performed, such that for any following operations all commands performed in 
step a) be without effect. 
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